Overview

overview

10

Static

static

10

bfdb191011...18.exe

windows7-x64

10

bfdb191011...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bfdb1910114cc2d40eed79a9fd1940c8_JaffaCakes118

  • Size

    2.6MB

  • MD5

    bfdb1910114cc2d40eed79a9fd1940c8

  • SHA1

    fca12cce9f8f52e0d5a489d23ee1a5c989dbed83

  • SHA256

    1c57376a7fb10c58352653eb871f5414868a455814d65755027335d9b126d352

  • SHA512

    0cc345a73410f505acfacb4387afdedaf58c3341339e0f2c181acead2f7b10cae9cf1adcd01c477bb2b37d9b801a8b4edc88512b26a92ccd3a2ffa7ca632d23a

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlO:86SIROiFJiwp0xlrlO

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bfdb1910114cc2d40eed79a9fd1940c8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections